Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2825003s -
max time network
141s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
22/12/2023, 08:44
Static task
static1
Behavioral task
behavioral1
Sample
7e503bcb783370b9462396472e88acaa.apk
Behavioral task
behavioral2
Sample
Kinguser.apk
Behavioral task
behavioral3
Sample
Kinguser.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
Kinguser.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral5
Sample
irootsu.apk
Behavioral task
behavioral6
Sample
irootsu.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral7
Sample
irootsu.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
Kinguser.apk
-
Size
692KB
-
MD5
d99191ab005bdfc6d3c3ae5a5c0da4d4
-
SHA1
739c6a8bc6dd1835e819dbcc21e872628246aefb
-
SHA256
dc40363538e02879fbfe63af2a02aecf5eb73bd66d139cd786612dbb15e1c2e0
-
SHA512
2c82dc20f31455ae471c40e85f7fe4c7190b2efbf916ae8c67bf74c7fc4be8bbc3c13a9002ae85cf2937fa7f92b793b975cdaa06b300cb8915d91f03ec9b4a9f
-
SSDEEP
12288:KXAaNkDOM2WBYuI388aGXzAO2Ng3lrO8tBEpDgD/2K4AkIWPDk5PrR6iD0G:8R2YuIhXBqg3lr0W/2VICw5N5
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kingroot.kinguser
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
69KB
MD560c4a7fae8a56b933e63d020fde24368
SHA14dcfb12f694d89ef95767b49ec094d8621289a33
SHA256cf826d5710e58b3495fd05c6560e805364fbc997a19cd12f8ef881c2f49c9591
SHA51249c008032a851bf47a1a14291242ff0a1443327f79e48b630c3cb4130bb09747043561668d1e09b45fdf4a3ba4fb87344db22becb2ab835c063ffb0346515912
-
Filesize
44KB
MD57795528d4b203aa3720af2babd7c4450
SHA10451bf944d0c99d6360482ebf4374d6a473f394e
SHA256381d323605d5700510a0cc2e3f0c6bd1349cd211fb8a15ecbdc9f965f2ff13c1
SHA51206cdb9c2e822d4d956238351aec2886688df47876c4ac5518ff12659d519a3b7b9efdebee94fbbbaa11d52096525d4d9bf1661c7bb486cacc61904ef9cb76763
-
Filesize
36KB
MD58dce8a5ecd3025b14da78960afbf56ab
SHA1b6dbd81ee7a4bd2e120aa9dd9a8808b7993899a0
SHA2561c8c4d5f965212436aa6de5e895d4f91976018a95b91b3659241e54d1b08d101
SHA512ea9026c82e3d631c25d7ff21453a331178ae30e9df1984e3abeff1fec8f640f373de8a5ad5ccdb5191cb66d13d13e7affa49f6bce00f719ce5926338e9fc60ad
-
Filesize
16KB
MD5ec29fa69fb52f95b04f04610fe54c583
SHA1a0acad917e0851d879b42fa1b6fb51a9e804ee95
SHA256b2ae43d0792ea4944fe1602f5c26e9b56bb8a77b5ebc5acc97149b1ad94a8619
SHA51221222767f33d2c72893be369da102bf2019ce91af0aa24cbd46d458597bcbce0af4c336cbdf6948111d0c84ca75f2e8285d4c684b47419703768f21640c4a2c2
-
Filesize
512B
MD5e9377ad07f4bafaee8a59754ebe60d31
SHA196ffddb1433cd0204b1f5f455a96f06d00fd8a97
SHA2564991bbc3ab9fd9d4112434a639aa55dc89ae020bf7f141d7df13f37ad71104d5
SHA5126113a73599ec8f400ef1d1f8292b550191fc56376c56df4c6086b881e98b48b8e6d4a9ee764617dcfccbbc1b556ad31faf0801659a1aacd3f81f520b4a6e0fec
-
Filesize
8KB
MD55d7bdf17e6f7ec3faa3db45bd1734886
SHA1400f43d96f404aa933a2a980c136b58db1929268
SHA2567270d9d4a39d97080fefba83fd3b168b78fd87a5d8e115b85ae069e429be068a
SHA51263371e9e4561e1686e21613972ec1f0d8f095ca8bf58ceda0fde603b01dc69682ec46895b24ccde10d5ae0e13da1da4996889ec1416d55192afece066709d49f
-
Filesize
8KB
MD581c55187841760698e25591ceb5fb288
SHA1ede64e16344decb568f888625f742ae7c6b4555e
SHA256102a88ae06c19a62adfd524dfae891a4a8705b1d90f2c88b2ebe0001760950bc
SHA51202e059d72e5d780cf32d566f8175963b750ccb45b3587db98d5bba0d212189945084b9bcf6bf041a6a447f88f3f782b482944fa73870aa884f86bc0856f09cad
-
Filesize
8KB
MD54d70bd0af7bba9f76e8ac862f9928a46
SHA16bec4208206d42baa4ca4fa74948b71586660d9b
SHA25605053ba8c31694f9a6adf284ba85b66ca8d2b4c4742fe8f54a95f7b30b91821a
SHA512de60f3967c658020cbd1171f822f509a5c2b47d4e2675f10226c4fc8fe72ba387fc02d8a5cd0626482d8f6045b94962cbc1de11ee3ced79bd7895aa48571dfcd
-
Filesize
8KB
MD554ad9490027f151b3a63f70fd92b98ac
SHA1f82ebff7b7544c4df3b838acb768ebd3303522ec
SHA256719dd4fea707430a2e496815d1aa9c13646fc6c83e320d4b9c0b167f03026ad4
SHA51207bd71c73261585f16b673fd2bf0c714ad5dc91105c4de3f6bd190644b506b3bee52112e4e26dc8a47ebb855c9a7822f1e1dc529ca4dd1d537082bc36a67df4d